Home / Privacy Policy
Privacy Policy
SelfPay is a brand of Controlink, Lda., tax number (NIPC) 513702717, with registered office at Rua Leopoldo de Almeida, n.º 7A, 2725-357 Mem Martins, Portugal, the controller of the personal data collected on this website (hereinafter “SelfPay”). In applying Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), in force since 25 May 2018, and Portuguese Law no. 58/2019 of 8 August, SelfPay informs you that it is implementing processes and methods that allow users to enjoy and exercise all the rights established by this legislation.
Accordingly, SelfPay informs you that:
All personal data that may be processed by SelfPay will be reviewed, and only the information strictly necessary will be collected and processed, so that we can provide the best possible service to the client.
This data may at any time be requested, changed, have its processing restricted (marking stored personal data to limit its future processing) or be erased, at the express request of the data subject or a duly authorised third party: geral@selfpay.pt
In accordance with the applicable rules, if the Contract is terminated or ends for any reason, SelfPay undertakes to transfer to the User, or to the third party or parties they designate, all information collected and/or hosted on SelfPay’s servers/computers. This transfer will be carried out diligently by SelfPay, at the Client’s expense, so that the information in its IT system can be migrated to another system.
In accordance with the legislation in force, SelfPay undertakes to respect the duty of confidentiality, and all Controlink, Lda. staff are bound by secrecy under the GDPR and Portuguese Law no. 58/2019 of 8 August. Where any type of subcontracting is used, the relationship will be governed by confidentiality under a written contract, in accordance with Article 28 of the GDPR.
To prevent unlawful access or any unauthorised alteration, copying or replication of data, SelfPay is currently implementing several measures to mitigate these possible failures, including: encryption of the storage systems of servers and machines holding critical, sensitive or personal information.
In the event of unauthorised access causing harm to third parties, SelfPay undertakes to inform the competent authority, the Portuguese Data Protection Authority (CNPD), and the affected party (the data subject) within the legal deadlines set by the GDPR.
Should SelfPay use subcontractors, and only where the subcontractor processes sensitive data in any way, SelfPay guarantees that the subcontracted entity will comply with the GDPR and act in full compliance with the regulations in force; this relationship will be formalised and validated by an individual contract or standard clauses.